Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.mft
File: ycTTQSeR46PplAQFieyK0vWP4xI.mft (raw, json)
Hash identifier: hGM+oDX7FUJCj+UK+x6O7GcM1U7FOs1lxDJvvt9mA0Y=
Subject key identifier: 7F:5A:10:08:A4:3B:80:50:5A:60:61:43:75:A6:5A:39:F5:DF:4D:66
Authority key identifier: C9:C4:D3:41:27:91:E3:A3:E9:94:04:05:89:EC:8A:D2:F5:8F:E3:12
Certificate issuer: /CN=c9c4d3412791e3a3e994040589ec8ad2f58fe312
Certificate serial: 019950E5E43E2ECD3E4CA18848774B662344
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ycTTQSeR46PplAQFieyK0vWP4xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.mft
Manifest number: 168B
Signing time: Tue 16 Sep 2025 05:01:07 +0000
Manifest this update: Tue 16 Sep 2025 05:01:07 +0000
Manifest next update: Wed 17 Sep 2025 05:01:07 +0000
Files and hashes: 1: mMGnUGaN6rsw58xOd0MAF_HAY9o.roa (hash: 0HzReZTMzsNR7hcuVRKNU/DysaBkSSFxX1IonoMajpg=)
2: ycTTQSeR46PplAQFieyK0vWP4xI.crl (hash: DdvrkdPPvH8PacZMMOKBgN6xc/x7QczxBgOmJMvcUSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ycTTQSeR46PplAQFieyK0vWP4xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 05:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:50:e5:e4:3e:2e:cd:3e:4c:a1:88:48:77:4b:66:23:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9c4d3412791e3a3e994040589ec8ad2f58fe312
Validity
Not Before: Sep 16 05:01:07 2025 GMT
Not After : Sep 17 05:01:07 2025 GMT
Subject: CN=7f5a1008a43b80505a60614375a65a39f5df4d66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e6:33:30:2e:76:cd:85:8f:b2:ce:4c:4e:c7:
cd:a4:16:4f:0c:31:55:98:7d:92:a5:75:31:0d:d5:
87:b2:64:af:5b:d9:e7:a9:ac:90:3b:e5:e5:0c:b8:
47:ef:da:b5:90:06:ef:e1:3a:74:e5:f4:5a:16:cd:
e5:fc:5a:5f:6b:8b:41:5b:3a:09:e8:9d:11:d0:60:
28:32:9b:fe:f8:08:6e:63:ec:8d:07:ec:ae:a0:f0:
3e:8b:1b:f6:3c:50:79:7e:28:9f:0e:9c:bd:09:9d:
cb:66:d3:9c:6c:09:49:aa:59:86:05:80:87:d9:5b:
eb:f4:f9:11:5d:10:c6:76:d4:79:e4:2b:2e:f5:60:
37:39:b1:3a:e2:46:c1:1b:cd:0e:f6:aa:60:4c:e9:
ba:a2:25:30:0f:a4:6c:4a:34:9a:d4:c1:80:4a:14:
ff:3c:cc:d7:04:37:5c:86:70:92:4e:41:54:d0:95:
d3:86:a9:95:46:6f:37:ee:d6:2e:52:02:a7:94:db:
7c:61:0d:f5:cb:8f:d4:a1:78:2e:bf:03:06:c1:ad:
9b:f1:5d:fc:2e:e1:9a:88:84:4a:50:13:95:d5:31:
23:45:47:f4:e3:a3:24:ce:5a:83:c6:d8:97:78:ef:
bf:96:6c:2b:2a:23:28:00:7d:02:88:95:d3:71:81:
e3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:5A:10:08:A4:3B:80:50:5A:60:61:43:75:A6:5A:39:F5:DF:4D:66
X509v3 Authority Key Identifier:
keyid:C9:C4:D3:41:27:91:E3:A3:E9:94:04:05:89:EC:8A:D2:F5:8F:E3:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ycTTQSeR46PplAQFieyK0vWP4xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:a7:a7:71:59:8d:4e:48:c7:45:d0:fe:23:5a:1b:85:9a:2f:
4c:ca:0e:8c:69:3f:af:ae:62:70:e7:bb:cd:f4:57:14:71:fd:
99:7a:aa:aa:dc:39:8f:d7:b2:6b:6d:f8:3a:e6:3b:1a:fe:cd:
98:c2:c9:50:f4:3e:a5:24:41:86:9e:b9:2a:d0:af:67:5a:6d:
76:0c:53:0b:f5:10:58:0b:86:3e:dc:16:cf:8c:02:03:81:26:
9d:72:50:de:38:86:4c:f4:93:b0:0e:24:3c:d7:06:05:ff:67:
91:68:95:fa:c8:cb:35:f3:0f:1c:13:05:17:1e:89:e7:18:52:
b4:68:fb:07:ab:df:4a:9e:b6:c5:0c:62:2a:be:23:60:c0:ba:
3c:bf:b2:ea:38:e1:66:9c:e5:d7:03:9c:dc:51:0f:8e:3a:c9:
4d:cf:83:6c:cf:09:39:8a:20:e6:dc:7f:6f:41:4d:a5:97:51:
a2:9f:1d:46:02:39:4e:8d:80:0a:b3:e9:eb:23:44:aa:00:12:
a6:fd:8b:54:49:10:6a:d0:76:44:2a:fe:41:8a:f9:1e:fa:85:
0f:0d:52:0b:55:40:15:49:68:cf:05:59:c6:03:39:f7:93:3f:
1e:7f:f3:d9:e6:dc:aa:19:be:d4:de:d1:32:4f:c2:19:36:5b:
84:d4:bb:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 12:29:18 2025 by rpki-client